Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e302e302f31382d3138203d3e203238303234.roa
File:                     3136312e35362e302e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          4Q03WPS9UJbetmrBEl2hVqQxOrpb/K6FIjPp1dvSICA=
Subject key identifier:   FD:CA:0E:57:A3:62:FB:A3:57:DF:A0:74:58:DD:D7:B8:23:CA:A8:A9
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       496BC0C14229F7F1BE501C684D7A168FF722BDFC
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e302e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 04 Feb 2025 18:03:09 +0000
ROA not before:           Tue 04 Feb 2025 17:58:09 +0000
ROA not after:            Tue 03 Feb 2026 18:03:09 +0000
asID:                     28024
IP address blocks:        161.56.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6b:c0:c1:42:29:f7:f1:be:50:1c:68:4d:7a:16:8f:f7:22:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Feb  4 17:58:09 2025 GMT
            Not After : Feb  3 18:03:09 2026 GMT
        Subject: CN=FDCA0E57A362FBA357DFA07458DDD7B823CAA8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:83:7e:3e:13:b6:09:31:43:56:ff:36:3e:
                    bf:fc:9a:1c:5c:63:cd:15:44:f7:d5:7a:a4:e4:b5:
                    50:fb:09:82:54:c2:ff:71:b0:4a:77:e4:44:5a:f4:
                    57:44:e0:33:0b:fb:be:4e:72:ae:ff:5e:93:0c:ef:
                    19:61:88:b5:95:e7:13:b4:01:a8:84:a9:8b:16:ac:
                    ba:62:5e:76:62:f8:05:70:e9:c1:59:73:67:52:64:
                    87:a5:a7:e3:46:1d:8a:8b:e9:53:ef:02:35:00:46:
                    de:a9:08:4e:6a:c5:e0:a8:2c:a7:c5:06:60:9c:17:
                    b1:92:c5:a2:86:03:f0:ca:1b:78:97:15:fb:1f:b3:
                    5f:be:cf:4d:fd:1e:9a:d6:22:bc:18:83:b0:bc:55:
                    30:71:42:c8:a4:2f:05:d7:c4:a9:6f:d7:47:5b:4d:
                    81:81:99:9b:49:66:6f:6f:96:24:f8:1b:ba:ae:03:
                    4b:11:a1:1e:ab:57:48:4a:47:25:19:01:9d:54:10:
                    ad:80:6a:c2:51:e0:c4:36:9a:d5:92:5d:64:81:aa:
                    a0:e6:cc:99:4f:e0:9d:6a:2f:67:c0:69:ba:10:ca:
                    28:73:c3:39:80:1a:0e:8b:de:a9:71:41:93:1f:a3:
                    07:2d:76:c9:55:df:76:ea:17:91:af:a8:2c:48:14:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CA:0E:57:A3:62:FB:A3:57:DF:A0:74:58:DD:D7:B8:23:CA:A8:A9
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e35362e302e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.56.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         12:75:15:f3:c0:d9:aa:aa:30:72:ee:39:a2:96:c0:5e:7f:e2:
         9a:c1:3f:0b:17:40:16:93:09:e6:75:4e:5c:23:bc:af:0d:01:
         6b:bf:36:d3:fe:5c:bd:9f:d7:a0:ec:d0:19:dd:62:6d:95:fc:
         d7:59:be:a8:79:84:06:da:19:34:5b:9f:19:a5:c0:c7:5a:97:
         ad:4b:60:b5:df:e9:03:85:4a:60:5c:01:72:5f:03:df:1d:69:
         ff:16:df:d1:01:ac:84:0c:f0:ce:27:b1:c4:f4:bc:b0:60:37:
         a5:e0:d1:19:08:17:a5:eb:6e:a8:38:8e:e9:a1:46:c0:a3:6d:
         9b:6a:c7:4b:d1:55:2b:db:94:36:cd:b2:5c:de:db:07:12:28:
         7a:5b:44:82:1a:59:f7:e0:6b:af:f2:c0:ba:0c:ec:d8:4b:d9:
         93:cc:7e:19:b3:46:75:f4:6a:dc:71:fc:9d:88:1c:3d:97:94:
         59:67:f2:97:cf:e2:a1:b7:35:ab:fd:92:0e:4f:4f:e2:7e:95:
         c3:95:c9:88:5e:a4:c6:fc:3d:47:e9:25:5c:54:a2:6d:f5:f1:
         25:81:2a:23:30:f5:34:02:58:6d:60:38:f0:a7:26:75:c6:45:
         9d:82:b3:e1:14:65:2a:97:d3:bf:77:44:09:fe:a7:98:4a:69:
         4e:65:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:08 2025 by rpki-client